10-Strike Network Inventory Explorer Pro Unquoted Service Path Vulnerability in Web Server Service

A privilege escalation vulnerability has been identified in 10-Strike Network Inventory Explorer Pro version 9.31. The issue arises from an unquoted service path in the 'srvInventoryWebServer' service, which runs with LocalSystem privileges. This vulnerability allows attackers to exploit the unquoted path by placing malicious executables in potential path segments, leading to the execution of code with system-level permissions.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing attackers to execute code with system-level rights.

Reproduction

The vulnerability can be reproduced by querying the service configuration using the Windows Management Instrumentation Command-line (WMIC) tool. This will reveal the unquoted service path, which can then be exploited by placing a malicious executable in a directory that is part of the path.